Vulnerabilities

TI-2014-07036 CVE-2014-8563 · GHSA-972r-246w-r833

Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS.

MEDIUM 47

Synacor Zimbra Collaboration before 8.0.9 allows plaintext command injection during STARTTLS.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02527 Published 2020-01-27 No fix listed CWE-78

TI-2015-01996 CVE-2015-2249 · GHSA-r5wv-5gpc-84mq

LOW 26

Zimbra Collaboration before 8.6.0 patch5 has XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00693 Published 2020-01-27 No fix listed CWE-79

TI-2014-04468 CVE-2014-5500 · GHSA-f4v6-mm6g-c3xw

LOW 29

Synacor Zimbra Collaboration before 8.0.8 has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00833 Published 2020-01-27 No fix listed CWE-79

TI-2019-08452 CVE-2019-11318 · GHSA-5w44-6qm8-5cf9

LOW 27

Zimbra Collaboration before 8.8.12 Patch 1 has persistent XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0111 Published 2020-01-27 No fix listed CWE-79

TI-2015-01982 CVE-2015-2230 · GHSA-q2x5-qxvr-ch2p

LOW 29

Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00806 Published 2019-05-30 No fix listed CWE-79